Extracted

• • Target

    JaffaCakes118_7a2e7c6583b296c788bc3da1440e52f0

  • Size

    119KB

  • MD5

    7a2e7c6583b296c788bc3da1440e52f0

  • SHA1

    2ae4e0de3a4b37a69338e7590cd86a8a3bfaf4d1

  • SHA256

    4745fb9102c034406e6985028d95494d407889a7486085ef5e2301073a7842d3

  • SHA512

    03cade978e65f9876c7a6eddb3aa166431115c9c6d89500d89b3d9489c702a0f3d3c57b686dee9098fc07668e412a37813da3bc8b6607b1406b4908151b30ca6

  • SSDEEP

    3072:jNjBvUV5wS3U/OUJcBqEftZDePNEqSDV3ywCKUJSbG:fMV5N3U/rcBX1ZDqNO3dCJJSbG

  Score

  10^/10

  ponycollectioncredential_accessdiscoveryratspywarestealer

  • Pony family

    pony

  • Pony,Fareit

    Pony is a Remote Access Trojan application that steals information.

    ratspywarestealerpony

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook accounts

    collection

  • Accesses Microsoft Outlook profiles

    collection

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2